Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-28 Thread Lars Weiler
* Robin H. Johnson [EMAIL PROTECTED] [07/09/27 15:11 -0700]: Go and read ALL of this bug: http://bugs.gentoo.org/show_bug.cgi?id=108944 Pylon and myself, as folk in favour of CA-Cert tried to get the ball rolling to get Organization-level certs from CACert. It seems to have long blocked on

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-28 Thread Mike Williams
On Friday 28 September 2007 01:10:48 Robin H. Johnson wrote: Is there a reason that my Godaddy suggestion in the bug isn't being considered? Regardless of what you may think of them as a company, they offer the same free type of certificate to open source projects just like cacert, and

[gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Hanno Böck
Hi, Everytime I'm sending out a mail with my gentoo.org-address, I get this certificate may be unsecure message. Gentoo mailserver (and forums, bugzilla and probably many more) use self-signed ssl-certificates. Well, I hope I don't have to tell that self-signed certs are not really good

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Petteri Räty
Hanno Böck kirjoitti: I think compared to self-signed, having cacert-certificates would be a big improvement. Many other free software projects (and more and more other pages) use cacert, so it becomes more and more likely that people will already have the cacert-root-cert installed.

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Andrew Gaffney
Hanno Böck wrote: I think compared to self-signed, having cacert-certificates would be a big improvement. Many other free software projects (and more and more other pages) use cacert, so it becomes more and more likely that people will already have the cacert-root-cert installed. How does a

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Hanno Böck
Am Donnerstag 27 September 2007 schrieb Andrew Gaffney: How does a CAcert certificate help? Their own certificate for https://www.cacert.org/ can't be verified by Firefox 2.0.0.7, which tells me that their CA isn't trusted by default. They're workin on that, goal is to include in ff. But

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Doug Goldstein
Andrew Gaffney wrote: Hanno Böck wrote: I think compared to self-signed, having cacert-certificates would be a big improvement. Many other free software projects (and more and more other pages) use cacert, so it becomes more and more likely that people will already have the cacert-root-cert

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Robin H. Johnson
On Thu, Sep 27, 2007 at 05:23:26PM +0200, Hanno B??ck wrote: Well, I hope I don't have to tell that self-signed certs are not really good security policy. Whether or not self-signed certs are secure or insecure depends entirely on your definition of 'secure'. - Is the traffic encrypted between

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Caleb Tennis
On Thu, Sep 27, 2007 at 05:23:26PM +0200, Hanno B??ck wrote: Well, I hope I don't have to tell that self-signed certs are not really good security policy. Whether or not self-signed certs are secure or insecure depends entirely on your definition of 'secure'. - Is the traffic encrypted

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Robin H. Johnson
On Thu, Sep 27, 2007 at 06:47:36PM -0400, Caleb Tennis wrote: Is there a reason that my Godaddy suggestion in the bug isn't being considered? Regardless of what you may think of them as a company, they offer the same free type of certificate to open source projects just like cacert, and